Best-practice Intune configuration for laptops and mobile devices
The municipality’s Intune environment was reviewed, improved and transferred to the internal IT team. The result was a more secure rollout process and clear documentation for ongoing use.
Sector
Local government
Tooling
Intune, Autopilot, DEP
Approach
Audit to handover
Gemeente Eemsdelta is a merged municipality in Groningen, formed from Appingedam, Delfzijl and Loppersum. As often happens after a merger, the IT landscape had grown in layers and was not configured consistently across the board. The Intune environment was already running, but best practices had not been applied in a systematic way.
That created a clear gap. The internal IT team could manage daily operations, but lacked the specialist knowledge needed to assess the setup properly, tighten security and make future rollout more robust.
The challenge
The municipality wanted its Intune environment for laptops, iPhones and iPads brought in line with current best practices. That included measures such as BitLocker, Secure Boot and TPM settings, USB restrictions and the removal of local admin rights. At the same time, the solution had to be fully transferable to the internal team.
Blackbear's role
Blackbear helped frame the assignment with clear boundaries from the start. The focus stayed on improving the existing Intune environment, rather than rebuilding it fully or adding tooling outside the Microsoft ecosystem. From there, the work was structured in four phases: audit, reconfiguration, pilot testing and handover. That setup kept the project manageable and ensured knowledge transfer was built into the delivery.
Result
The Intune environment was reconfigured in line with current best practices, including stronger controls around user rights, device security and update management. The municipality now has documentation for consistent device rollout, while the internal IT team has the knowledge to manage and develop the setup independently.
